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We've recently decided to expand our initial analysis of Iran’s flagship Ashiyane Digital Security 
Team’s Internet-connected infrastructure on our way to assist the security community on its way 
to track down monitor and attempt to take offline a huge portion of lran’s flagship Ashiyane 
Digital Security Team Internet-connected infrastructure. 


In this analysis we'll take a deep dive inside the Internet-connected infrastructure of Iran’s 
flagship Ashiyane Digital Security Team and will offer an in-depth peek inside its 
Internet-connected infrastructure. 


Sample malicious and fraudulent domain portfolio known to be managed and operated 
by Iran’s flagship Ashiyane Digital Security Team: 


top-ten.us 
alaijadi.com 
darushparsi.com 
nedains.org 
nazaningroup.com 
momassanjco.com 
ashkanmostofi.com 
jalaliyan.com 
andylovers.com 
baghefadak.com 
nayedel.net 

atili.net 
arshiyapardazesh.net 
t3mco.com 
shivehart.com 
shirinclassic.com 
sat2hdteam.info 
ashiyane-ads.com 
rooyingar.com 
abargalaxy.com 
ashiankhorasan.com 
suldoz.com 
manjilpnu.com 
byrehs.com 
arshiyapshop.com 


bornapc.com 
semnan-cityrun.com 
vknprofile.com 
vzbar.com 
hpsam.com 
pavan-co.com 
yamahdi313.com 
hvachouse.org 
soft-war.org 
hsaraf.com 
hosseinsari.com 
urmsoft.com 
my-maghale.com 
akamclick.com 
cowsd.com 
linkedownload.com 
maramname.com 
shoot90.com 
ali-neshat.com 
cardiffvisa4uk.com 
baratipsc.com 
mohammadjalalian.com 
modamaer.com 
batrysamak.org 
mobilezone.info 
visualprogrammers. info 
secretroot.net 
saba-gsm.net 
aliansari.net 
01smart.net 
gheimatsamak.org 
mobna-co.com 
mojazatgar.com 
gomnamanerap.com 
sanatfanar.com 
geomapsolar.com 
yekanradtehran.com 
asakhodropars.com 
pardisins.com 
nikoosoft.com 
hamyarepolice.com 
kelasavalia.com 
sayadbar.com 
bax98.biz 


vizitech.net 

birang.net 
gheimatsamak.net 
batrysamak.net 
gheimatsamak.com 
balletiran.com 
shooot90.com 
batrysamak.com 
moblemanmoshtaghi.com 
ardins.info 

r0o7.net 
abrangbook.com 
egshaver.com 
shahyaad.info 
shahyaad.org 
black-hack.org 
aastroshop.com 
arianahosting.com 
devcm21.com 
151rapfa.com 
173rapfa.com 
172rapfa.com 
adamakhamusic.com 
musicadamakha.com 
kindly110.com 
richlifeco.com 
tappeh.com 
sabervakili.com 
gala-chay.com 
howzeh-fir.com 
king-dl.com 
amiri83.com 
dariopay.com 
tehranpersiancarpet.com 
tavousholding.com 
homayoonacademy.com 
zamani-charcoal.com 
studentgamejam.com 
naghshineh-stone.com 
mahabaduniversity.com 
majid20.com 
logins-yahoo.com 
t20game.net 
babalhavaej.org 


iransp.net 
hakhamanesh. info 
amna.us 
amidsazeh.com 
narbaran.com 
kiadec.com 
iranvt.com 
bainalnahrin.com 
ashiyane-co.com 
6atranj.com 
aranian.com 
smartparfum.com 
shahrroshan.com 
civilpen.com 
dmtehran.com 
amniatiran.com 
festivalwow.com 
163rapfa.com 
p30nic.com 
sedayeideal.com 
serveratomic.com 
soheylvps.com 
zhizman.com 
164rapfa.com 
didmancctv.com 
alpha2-tech.com 
parsdeskish.com 
skywardtrading.com 
shpweb.net 
securityexperience.net 
asemanbooking.org 
mojgostaran.net 
studioasar.com 
hbshahed.com 
ahangfa96.com 
shia-thought.com 
mojgostaran.com 
rahatmobl.com 
kosar3000.com 
antsvfx.com 
dptebian.com 
hasanabadi.com 
fifalike.com 
imenrayan.net 


shahyaad.biz 
shahyaad.us 
giftonlinecenter.com 
evollines.com 
spkwater.com 
pelkk.com 
fotros-bana.com 
refahsazan.com 
zsmahan.com 
irangb.com 
asemanbooking.net 
6atranj.net 
shahreroshan.org 
vakildadedu.net 
6atranj.org 
karyabiha.net 
custom-care. info 
montazami.info 
hamansec.com 
funsport190.com 
hitlershop.com 
rahpoyanweb.com 
armo.us 
tamoradi.com 
tahkeemsazan.com 
maryammozafarian.com 
fan30.net 
etegroup.info 
cfort.net 
iransecurity.net 
kalabarg.net 
jimi-notron.com 
mohammadsolgi.com 
zufaroyan.com 
imbcgroup.com 
bifestera.com 
tansazan.com 
derakhshanlooster.com 
nazhosys.com 
zibasanat.com 
aut-portal.com 
msk-civilengineers.com 
quarck-warranty.com 
golchehrehmask.com 


quark-warranty.com 
cdprint24.com 
vekalat-sepehr.com 
hibede.com 
m-mozafarian.com 
penttest.com 
modaresaneparvaz.com 
lohepardis.com 
farhadarman.ir 
gip-co.com 
zaqbor.com 
ashiyane-private.com 
golchehremask.com 
prochatters.com 
foodboard.net 
parsiansanatco.com 
niniload.com 
lebaseshab.com 
ufabord.com 
irsaflag.com 
hamgamtec.com 
azadeivps.com 
privatetunel.com 
mparsi.net 
golbaft.net 
spciran.com 
tohidgroup.com 
gp-parsian.com 
mbtextile.net 
sanazhosseini.com 
yaakha.com 
andylovers.org 
parspolo.com 
farqadanienglish.com 
fjbnd.ir 
iamconnected.ir 
alipoorsetmapi.ir 
autotiam. ir 
zomar-it.ir 
islahnet.org 
persianantiddos.com 
persianpoker.me 
persianpoker.co 
afghanistanovin.com 


daneshpool.com 
faryaadegilan.ir 
tohidgroup. ir 

rk88.ir 
azarmehr.net 
varzeshbanoo.com 
tta-co. ir 
andylovers.ir 
iran-camera-tools.ir 
artabux.ir 
account-yahoo.com 
nahadbzte.org 
persianpoker.asia 
persianpk.com 
babvey.com 
tavserver.com 
ansarolmahdi.info 
arshiaazar.com 
azadvatan.com 
bareshkhabar.com 
esteghlalpress.com 
lamarpress.com 
looyafghan.com 
kalamafghan.com 
tavazonnews.com 
vatanyar.com 
jamejam-mss.com 
serajakhbar.com 
vormnews.com 
farughafghan.com 
saharkhabar.com 
zeamatafghan.com 
edalatakhbar.com 
gb-flower.com 
tb-ghavami.com 
persianpokers.org 
persianpoker.xyz 
minagolespadana.com 
6y4umc6ne.xyz 
ganommacaroni.com 
persianpokers.com 
persianpokers.net 
ghasedakeroya.net 
sale-showcenter.com 


hojjat-dorvali.com 
zartoshtsepideman.com 
sepideman.com 
mehrsima.com 
persianpoker2.net 
shukamo.com 
bondahesh.com 
chizmiza.com 
bigonah.com 
pokerbazan.org 
pokerbazan.info 
pokerbazan.net 
shokuhi.ir 
piremehr.org 
piremehr.net 
granesh.com 
kooroshsport.com 
nt-trucksparts.com 
p-android.com 
piremehr.com 
pokerbazan.com 
tabeta2.com 
arabicgulfnews.com 
banoosafidress.com 
chipiran.com 
persianpoker10.org 
derakhshanluster.com 
hamechizbekhar.com 
gostaraan.com 
civiladvisor.com 
inrsd.com 
hamyarteb.com 
iranzomar.com 
graneshagency.com 
cbscasino.com 
mahanmotarjem.com 
markazirey.com 
mehrsamahd.com 
sadra96.com 
zanboorha.net 
sedaafg.com 
hanihyper.com 
persianpokers.info 
persianpoker2.info 


8000ghahraman.com 
abisiah.com 
aminiansafety.com 
almasoa.com 
aras-soft.com 
argulfhost.com 
ashiyanehost.com 
anglub.com 
arabicgulfakhbar.com 
ashiyanesms.com 
bariran.org 
geraneshagency.com 
banafshehjalali.com 
peyman-omidi.net 
persianpoker3.net 
pkpersian.org 
palvasha.com 
hamyarteb.org 
Id-pro.com 
iranmoshaver.org 
ghotb.net 
sayyadbar.com 
ganjinehoosh.com 
persiangarnish.com 
niceceram.com 
nikoomud.com 
pakhshariya.com 
mehrehonar.com 
shimanezhadhoseini.com 
rogatour.com 
samimeni.com 
socialelitesecurity.com 
saudigazete.com 
telmakesht.com 
tavmarket.com 
tabasholeh.com 
pkpersian.xyz 
cbscasino.net 
ashiyanex.com 
hitoxy.com 
itdevise.com 
payaaviation.com 
itdeviser.com 
candis.ir 


bnis.ir 

lamroid.com 
tanyar.org 
dcligner.com 
chipiran.org 

m115.ir 

sptco.ir 
ghoranisade.ir 
8000ghahraman. ir 
pasteurhospital.com 
zanboorteam.com 
ariabim.com 
securitexperts.com 
paydarsazehbeta.com 
taheri-tennis-academy.com 
afghanbalana.com 
afghansaba.com 
ern-co.com 
mparsi.com 
arvand-moshaver.com 
softweretabriz.com 
vaccum. ir 

hsrn.ir 

ashiyanebot.ir 
ashiyane-bot.ir 
t3hosting. ir 
shahrepars.ir 
rasht-samacollege.ir 
3diamond.ir 
mahmoudbahmani.ir 
imam-khomeini-kob.com 
giagenpharm.com 
3diamond.biz 
persianpoker.wtf 
mam-technology.com 
irandownloade.com 
eram-peymayesh.com 
irandownlodes.com 
babaktav.com 
vatanpaydar.com 
pkpersian.net 
xn--wgba3di6y7p.com 
jonoobhost.net 
mhdcard.com 


ashiyanecrm.com 
tabta2.com 
piremehr.ir 

manak.ir 
mohsend.com 
ali-dio.com 
pardislustr.com 
pardisluster.com 
dariushelectronic.com 
aydishost.com 
ikeastand.com 
whiri.org 
mahmoudnasrolah.com 
nedayesahar.com 
pachoon.com 
pamirpaper.com 
andylovers.net 
lezzateriyazi.com 
persianpk.xyz 
persianpoker.pro 


® 


ashiyane.org 


iG 
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Related malicious and fraudulent domains known to have been involved in the campaign 
include as part of what appears to be a service managed and run by Ashiyane Digital 
Security Team which is a privacy domain registration service: 


privamembershipgroup.com 
premeiumfrenchuebreaders.com 
sellinginfrederickburg.com 
saynotowillowridge.com 
smallworldadoptioninc.com 
shopkongcompany.com 
spainelbowls.com 
skylandcolorday.com 
sterling-publishing.com 
specialtysoreservices.com 
teaspractisetest.com 
tarrytownjeweler.com 
thegympintop.com 
thedeangelo.com 

thrityfuel.com 
themussarinstitute.com 
prudenceandbayislandstransport.com 
pomodorrotechnique.com 


rainmaker-modeln.com 
quaestusofzealandia.com 
revrobotices.com 
ritasicebethelpark.com 
robbiandmattew.com 
robloxmatchthe.com 
rosemary-crawfordforjudge.com 
roobinwood.com 
screwscoop.com 
samsonmotorphilly.com 
myschoolabstuff.com 
lastscripturetool.com 
peacwfulpoochgrooming.com 
oliversdayspa.com 
weismarketkutztown.com 
warzonenow.com 
randrcateres.com 
petitegardner.com 
paneltrucksonpintrist.com 
redtailcrossfitaz.com 
soborenovation.com 
ridgeroadrun5k.com 
thesmokeshoppitstop.com 
thientichmat.com 
whereluxurumeets.com 
watertechonlin.com 
wwwarlingtonorthepedicsharrisburgpa.com 
wwwmelniklaw.com 
wwwnew4/7com.com 
x10filters.com 
quakerheronpress.com 
moparsuppy.com 
secondharvedithrift.com 
queenishot.com 
singhchaudhuri.com 
sheridanaveapt.com 
smartcookiesabc.com 
silversideclub.com 
southernsonsband.com 
shoutfactoytv.com 
tamilboxxyz.com 
staplesrt1southnorthbrunswicknj.com 
thiccnaughty.com 
teeoffwithtallley.com 


viralydesign.com 
ukcatfighting.com 
uunfranchise.com 
zonevegasworld.com 
virginiaemeralds.com 
uniformsselect.com 
wwwdancepixs.com 
ultimatefaceofflax.com 
wwwmbossrevolution.com 
url5457enverus.com 
xn--rachenentzndung-8vb.net 
xn--hhnchenbrust-gcb.net 
sweetdesls.com 
myaccountcox.net 
whitetages.com 
mullenswindyhillbulldogs.com 
htotaljerkface.com 
travelositiy.com 
yamahasporte.com 
xn--obsenefamily-mdb.com 
kandgknifesuply.com 
zoomteamdiamondquest.com 
thekillaplug.com 
shopsureka.com 
virtualchritmassummit.com 
vanishingkodavas.com 
vioiscooters.com 
wilkinsonhomeslic.com 
winnercirclechrylerdodgejeepram.com 
wildharvestrecipies.com 
wwwstjaneschool.com 
wwworzyboskitrains.com 
xtranonnal.com 
wwwvaqueourbano.com 
allautodetailingllc.com 
apscdedule.com 
freeonlineconvert.net 
vableone.net 
virdginmedia.com 
animalinnboardingkennel.com 
bfgtires.com 
advancediscountauto.com 
caninetraining.com 
attorneybennettla*w.com 


bijoubridalwear.com 
bucefalos.com 
benchs.com 
petersonsam.com 
brotherproducts.com 
bodymakeoverfitness.com 
omrga.com 
evolvecomputer.com 
actio-j.com 

hotmdail.com 
Odardspeaker.com 
311soundsystem.com 
acuraafinancialservices.com 
247wintermahjong.com 
22carrotsjewellery.com 
13inchhores.com 
1m4narmy.com 
adamandvera.com 
a2nbtpm.com 
afneurope.com 
adeedesk.com 
aentamedical.com 
maddenshoes.com 
generalpsychology.com 
careingbridges.com 
moutainglass.com 
minecraftforget.net 
hamptonhistorymuseum.com 
themomenthouse.com 
rebornes.com 
all-costumes.com 
foid4less.com 

sweetly.net 
applecalls.com 
lancastetonline.com 
shakesspeardark.com 
divine-baking.com 
solvomusic.com 
buckscountycrittersitter.net 
airkorean.com 
citieasy.com 

bountyh1 3inkling.com 
attrewards.com 
acccessmycardonline.com 


Qjumpin.com 
airlnetickets.com 
amentumbenifit.com 
isaiahmjackson.com 
citaationmachine.net 
hostmybuil.com 
forumpaylas.net 
rmxtalk.net 
assitantcheck.com 
benefitsoluver.com 
lalabcorp.com 
enrollpenni.com 
entirelypet.com 
vobaulary.com 
assology101.com 
mylearningppan.com 
exploringlerning.com 
vaccinesshop.com 
instagdp.com 
cherylpotermethod.com 
cperewritten.net 
crousehealth.com 
spyninjafadgets.com 
valleypresbyterianchurch.net 
omnicalcylator.com 
stanberyinvestor.com 
kppccleanup.com 
collinsonassitance.com 
washintonnutritiongroup.com 
mcmotorhomes.com 
wahqueenjobs.com 
salesforcelogin.com 
epicgamme.com 
undertal.com 
psxcheevos.com 
planter-bank.com 
pornhub-x.net 
hoa-eden.com 
chestnuthillhospitaltowerhealth.com 
admiralmarket.com 
panaceadecorations.com 
rosensfurniture.com 
southshorecustomauto.com 
web 1zixmail.net 


xn--vrustotal-g5a.com 
mcuud.net 
roalcaribbean.com 
honeycrip.com 
homedepotprotect.com 
roaylcaribbean.com 
syscojobs.com 
syscofoods.com 
cardinalheath.com 
on-line-stopwatch.com 
onlinemetels.com 
stansbeeryinvestor.com 
shepardssofware.com 
fortnitegal.com 
southweatindian.com 
callorputoption.com 
frightbag.com 
championrip.com 
mdblackweddings.com 
inkpinxie.com 
aportshoes.com 
maximalistsbr.com 
tiktoklies.net 
americanboardofradiology.com 
repeatedly.com 
farskids420.com 
bibliotekaislama.com 
creativelandgh.com 
serien-blog.com 
dadecountyauditorium.com 
omishfurniture.com 
universityofphenoixonline.com 
emarinegps.com 
narinmusic6.com 
bestfunnywebsite1.com 
bloomerschihuahuas.com 
quoteonlinedirect.com 
sibbaldpoint.com 
recepient.com 
bruxellesguide.com 
alaskacanopyadventures.com 
acuratecredit.com 
movilesapps.com 
laketahoeaccomadations.com 


johnsonbikesh******************op com 
swiatmody24h.com 
rickhendrickscars.com 
wwwfreeridegames.com 
wild1-shop.com 
pelis-sevillista56.net 
janclean.net 
truehairexpressions.com 
virtualuniversities.net 
sexyfungirl.net 
hktalksex.com 
extroversion.net 

pearl-jp.net 
badcredit-plastic-surgeryloans.com 
concordappliance.net 
universalstuidios.com 
theonlineanswers.com 
asianhoneyflowers.com 
animationcreater.com 
homeloantulsaok.com 
atnainsurance.com 
sexblogs4men.com 
leclairmonument.com 
cartonnewort.com 
ala-mails.com 
danicacleanroom.com 
darc-kennel.com 
hackingbazar.com 
floridasoysolutions.com 
omgpeoplesearch.com 
investigadorprivadomx.com 
cieloeventcenter.com 
calling-cards-international.com 
conspiracy-files.com 
cinamarktheater.com 
minutemenmovingcompany.com 
matrixcardinfor.com 
newinflatableadventures.com 
nicholspartyproductions.com 
pearldreamcakes.com 
officedipo.com 
tacobellhronline.com 
saudiairlaines.com 
chandrasdietsuccess.com 


tightwadmagazines.com 
stanstephencruises.com 
mysteryshopperinc.com 
yakyedter.com 
wvengrade.com 
abbaselyawi.com 
aafeassmat.com 
heavenlygrass.com 
alaskafishingoutfitters.com 
ibda3tv.com 
hamc-ill-nomads.com 
lifestylefurnitureuk.com 
hwaaiianairlines.com 
massachusettslotery.com 
madisonsquareshoes.com 
piratesimageteam.com 
nailfungusnaples.com 
quotationsandquotes.com 
polballbaan.com 
satkeynet.com 
pfeifer-law.com 
ukgrapevine.com 
summernational.com 
canadianpillspharmacy.com 
elitecars-tenerife.com 
dieta-allergia-nichel.com 
bentgod.com 
hackingbazaar.com 
gresham-hotel.com 
progressivewast.com 
ile-aux-plaisirs.com 
publicabuse.com 
rainbowfederalcreditunion.com 
tienda-led.com 
transformadoresmora.com 
mainwoodheat.com 
veebikaamerad.com 
expressrcparts.com 
elcartelrecordsmusic.com 
hatoya-syugei.com 
ezymoney2u.com 
womnsday.com 
vuelolatino.com 
classifiedadschennai.com 


yardgearproducts.com 
fiestaamericanavacationclub.com 
consultapuntos.com 
freeaviplayer.com 
forexcashprotector.com 
martyandliz.com 
jacksonvillencmotelrooms.com 
servicedeerpark.com 
sears401k.com 
okt161.com 
teachingresouces.com 
cuttingedgesawmill.com 
cbssurvivors.com 
mansinghotels.com 
cyberharddisk.com 
mc-sasuki.com 
mattressworld-tx.com 
ny-defensivedrivingcourse.com 
myprofessionalskit.com 
ptc-romania.com 
progressivemarble.com 
uploadpanel.com 
spainblogs.com 
usabarstools.com 
stickerstadium.com 
countertopstoreinc.com 
aflacexamfx.com 
ebankingdomain.com 
dedfisiopilates.com 
homeboyzdigital.com 
foxsoccerchanel.com 
klips2save.com 
intimate-scotland.com 
loadengins.com 
lakecyclingusa.com 
pantheon-audio.com 
mypearsonslabs.com 
tienda-aerografia.com 
sancarlosstairs.com 
mulbang49.com 
mulhauserflowers.com 
outsourcerabbit.com 
n-roppongi.com 
xn--zaubersprche-llb.com 


safelinkcellphone.com 
beanworldwide.com 
754830-m.com 
circuccircus.com 
bestialitypicture.com 
crossmyheartinc.com 
custommadeinvites.com 
pengocent.com 
johnthorntonchevy.com 
seattemariners.com 
sharebuilber.com 
sqairlines.com 
scotlinetours.com 
www5dgz.com 
triftycar.com 
coup-kid.com 
writtendictionary.com 
ahliteraryagency.com 
all-scanersv3.com 
belimumabsymposium.com 
azhur-mag.com 
eaconusa.com 
budjettruck.com 
excel-imaging.com 
elkhartcountylanduse.com 
lebowclothing.com 
huggoboss.com 
cccam3dserver.com 
blueskyanimazione.com 
creditoffernow.com 
computerstudyguide.com 
gunninfinity.com 
greatlakesridingclub.com 
jeepcrysler.com 
herzrental.com 
keywordsmeter.com 
jhurtadodev.com 
modernbridgeclothes.com 
music4mobiles.com 
presbyopesinyourpractice.com 
perapisurgeon.com 
prosedurnikah.com 
pearsonsmathlab.com 
hotelhibiscuscity.com 


newshemaletubes.com 
candcbridalboutique.com 
miamiplasticsurgeryskinstore.com 
dvbwholesale.com 
comparecrmreport.com 
myfreecopyrights.com 
medicaltoolz.com 
nicksgateandfences.com 
newfreespace.com 
apilazarocardenas.com 
taxis-aeroport-beauvais.com 
citimorage.com 
assistatvgratisonline.com 
newyesjar.com 
edisonlocal.com 
vacationhometraders.com 
thinkfastsms.com 
dccraiglist.com 
chinahotelrates.com 
gardenhomegarden.com 
figuresnbits.com 
london-sightseeing-guide.com 
justicialismo.com 
tuffooardcakeboards.com 
sistema2reais.com 
beachlandtours.com 
ariahospital.com 
leatherstrings.com 
e-yusen.com 
noorzboutique.com 
listnetoyoutube.com 
dptostemporarios.com 
ulticonverters.com 
scottradr.com 
thaimetalsheet.com 
cartoonnekwrk.com 
butteschooldistrict.com 
com-reader.com 
chasecrditcards.com 
homedepotkitchens.com 
generalfabricate.com 
phonixuniversity.com 
nbscbank.com 
wakeupvibes.com 


shuttlecomputers.com 
makemoneywriting-site.com 
minecraftskinpro.com 
sarahcoatsdesigns.com 
pichitplazahotel.com 
westinunion.com 
vitukovyamtaanews.com 
dayofourlife.com 
wwwethiomedia.com 
bookforman.com 
best-tv-reviews.com 
classjumb.com 
calypzobangkok.com 
manavgathotels.com 
foreclosureinfosearch.com 
radiateurformatec.com 
orgasmsarts.com 
romneycycle.com 
rjc-auto-pieces-demolition.com 
jacksonequestriancenter.com 
freneticrapport.com 
musictweaks.com 
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getleeffilter.com 
almaskoof.com 
tepublicservicesvegas.com 
adtpayroll.com 
applicantstart.com 
budgetrentaltrucks.com 
copunty-recycling.com 
getwaterfileters.com 
incomtax.com 
healtherquity.com 
harborstonecreditunion.com 
livwbarm.com 
kingschoold.com 
markjacob.com 
littletolncoin.com 
loveloueeda.com 
keepingkudsinschool.com 
naturalvirz.com 
joinmyquizzie.com 
newtonbugbee.com 
pointepremierdance.com 
mrpureplenyc.com 
pennvallygas.com 
palmresturant.com 
palmettoststesrmory.com 
parturmpiketollbyplate.com 
oversttcok.com 
coonmarketcp.com 
coppersofstortford.com 
bestfrindsbysheri.com 
creatprintable.com 
braxforexchane.com 
colonialchevey.com 
classifacodos.com 
bestseires.com 


elitepeformancechallenge.com 
bedroomfurnitures.com 
hjennykane.com 
deercraftsstore.com 
golegenerdy.com 
freebodyawake.com 
kingsvillevaccineclinic.com 
laurenissmelly.com 
starpoweralent.com 
vermontcunrystore.com 
venerableannuiuity.com 
superstrias.com 
southparkstimes.com 
streamqvmax.com 
wwwtachshaver.com 
wwwtalktostopandshoo.com 
wwwnycbakerydirect.com 
wilsonslleather.com 
wwwrsppro.com 
wizard-air-freshener.com 
woldandmoon.com 
wwwibsportscomplex.com 
armyusa.com 

acquity.com 
northtosc.com 
nothtroom.com 
readyrephreah.com 
skostillcappin.com 
sightmattrs.com 
replacementalens.com 
questdiagnistocs.com 
recplacements.com 
serenaaflowers.com 
sallysbakinhaddiction.com 
therudenreort.com 
ralphmatiby.com 
tradingrview.com 
thismylanguage.com 
uncommonsuccesbook.com 
teebbyduh.com 
geicfo.com 
bmwcatonville.com 
suntruse.com 
tumerichutnj.com 


burgerkin.com 
autoarmor.com 
childrenbedroom.com 
basfbuildingsystems.com 
firststatecommunitybank.com 
dairyallergy.com 
facialexpressions.com 
expresscafe.com 
mackweldan.com 
jackybutler.com 
johnhancockhc.com 
mayahouse.com 
logistomatic.com 
dectralizewsb.com 
localstwls.com 
miaccount.com 
qdxpathy.com 
physicionmutual.com 
watchungview.com 
thegypseyrocks.com 
bigbpssweeps.com 
arizonajeancompany.com 
mycsus.com 
calvertschool.com 
geraze.com 
warriorcars.com 
boatloatpuzzles.com 
molleyandzoey.com 
sundancscatalogue.com 
areopastelle.com 
payschoolscentrtal.com 
smileteamsc.com 
wwwyourdependaniverification.com 
parishsoftfamilusuite.com 
hopmedpot.com 
amzaonjobs.com 
thompsonseafood.com 
charisih.com 
aqaudragons.net 
akwaabamagic.com 
rite-ais.com 
playufcpick.com 
paystaytion.com 
shopwithmiesa.com 


onlinedrivingtest.com 
mygiesnger.com 
nbcnews4.com 
ogtocosurvey.com 
perrylocal.com 
mytadbenefits.com 
textindsrory.com 
usajobsgov.com 
wpln.com 
utahpower.com 
violqationinfo.com 
ashlyeyhomestore.com 
euurocarparts.com 
experionidwoorks.com 
getbattlevizion.com 
burlintingenglish.com 
humancustoms.com 
annecile.com 
teackitt.com 
mytmobole.com 
brradparents.com 
appwithoutcode.com 
atavan.com 
vaniddes.com 
bridgenine.com 
artevh.com 
apscchedule.com 
artsytems.com 
anydeske.com 
ablesafy.com 
chillipipper.com 
clientsaccessweb.com 
ferchrewards.com 
thefireetorch.com 
dubsabo.com 
adityaashahh.com 
postcrossng.com 
uhcporivder.com 
directvguide.com 
buffalogalhats.com 
dicscoverhomeloans.com 
gothamsteeregister.com 
coopestownluxury.com 
lightathome.net 


jarredsjewelery.com 
brstvuy.com 
athenservice.com 
adidiaa.com 
mercury-girf.com 
karaokewarehouse.com 
revoleclothing.com 
postInews.com 
vaicomcbs.com 
southrivervollyeballclub.com 
24hoursofproductivity.com 
loacalphone.com 
batonrougeplasticsurgeons1.com 
freeannualcrecitreport.com 
comsearchmarquis.com 
gwynnparkalumni.com 
thecollegecouponer.com 
sourgrapesgames.com 
baesystemsensions.com 
leilabuffery.com 
evelyngravescrusaders.com 
cculus.com 
njfamiliesfirts.com 
dryoungonline.com 
pittsburghrivals.com 
roburglobal.com 
serebui.net 
spannkbanng.com 
phillrs.com 

perfoment.com 
shopwallbuilders.com 
profootbqlltalk.com 
venusswim.com 
vickerslanding.com 
dallascowboysstore.com 
zadahkicks.com 
wwwinsighttours.com 
shelterpoints.com 
vernerhealth.com 
rackspapce.com 
cthsherril.com 
buschgardents.com 
horozionblue.com 
buffalosabers.com 


wwwpurewickathome.com 
myhjyearbooks.com 
tpttherapy.com 
validarely.com 
dominespizza.com 
discoud.com 
hogesmarine.com 
halturnerradiowshow.com 
shoptottenhamhotspur.com 
bestblogrecipes.com 
cumstomerisrite.com 
propretyshark.com 
tenaflyprediatrics.com 
walgreebn.com 
oneclickckicks.com 
globalcarerc.com 
dannyteneglia.com 
temptation360.com 
jobbdiva.com 
eretsy.com 
valleyheatihlink.com 
radpartnersportal.com 
freebelady.com 
wikipedai.com 
donosafari.com 
famousinternetgrls.com 
orbitrf.com 
myclubehyndham.com 
nationaldept.com 
iteaide.com 
northattleboroschools.net 
ntiretraining.com 
ralphlauremn.com 
mycish.com 
reincanda.com 
openseaa.com 
panderabread.com 
rubratrings.com 
yachyworld.com 
mueyedoctor.com 
thewallentgroup.com 
pluralsightn.com 
worldogsolitaire.com 
stapked.com 


chrislivesjulia.com 
annnieselke.com 
gizmdodo.com 
expeessexpense.com 
necivils.com 
maxdragonflyathletics.com 
echoparkpapers.com 
jovianarcive.com 
samandaproperties.com 
replies24.com 
buttuglybabies.com 
apscheduole.com 


© «@) ®) 
Sc) \<] \Z) 
tynar.com horaor.com goaemy.com 


iG iG iG 


@ 


fundacionprivacy@protonmail.com 


@) 
sc) 
keurigmachines.com ariats.com 


iG iG 


7710458 189d4f95f90fb3de3426d128GD60b749c5bcba7c8635520153 1892244293 b03daas58d9ebb36 DEBEGTsa 150508 18d64d86442e7c0e9d 2ca5703d9cfacfhc8383e247650cca13 


Sample malicious MD5s known to have been involved in the campaign include: 


d8be2cb061a78f3d58ea7f33c13f8c50 
56945185807ff04a89fc061956c7eb9b 
8237f694b594e43c5743740bacadd0fb 
1a92244293b03daa858d9ebb36bf57fc 
53e€09a901432b433de6205d608b55750 
c42afea83f09c65f9407886b7a382b33 
786b60b749c5bcba7c8635520f531 387 
6d4a0dcbd33daf892bbb84966082f655 
7f10458189d4f95f90fb3de3426d1297 
cea6ff8a150508 18d64d86442e7c0e9d 


69655a0109e4efc37b29b1 645fc80ece 
93c5585d187b9cce067b561 3bf65a781 
2ca5/703d9cfacfbc8383e247650cca13 


We'll continue monitoring the campaign and post updates as soon as new developments take 
place. 


